Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2f4a693-e28c-3388-9a64-a55c0025e700.roa
File: d2f4a693-e28c-3388-9a64-a55c0025e700.roa (raw, json)
Hash identifier: lvmQ5DOAPCoK+HKDKZm6jgnvLGCspE+OAAyxZIgj+9o=
Subject key identifier: B3:A5:5A:67:7E:B7:79:ED:CC:C4:10:14:03:03:65:FD:41:DA:B4:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F4C0798DE115D95D83C8B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2f4a693-e28c-3388-9a64-a55c0025e700.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 52.223.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:4c:07:98:de:11:5d:95:d8:3c:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=231255c2-42f8-4184-bd57-33e967d027b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:17:b6:8c:3f:59:bc:17:b8:e9:a0:e8:67:
87:94:d2:96:af:e2:5b:1a:26:8e:db:91:ae:38:12:
1c:4c:d5:ad:d9:32:ef:f8:49:c7:b2:78:75:36:bd:
7c:31:94:f3:d4:68:2c:52:b7:1a:f4:d0:31:27:59:
79:42:b2:47:eb:d3:58:4a:f7:f7:23:f1:82:bd:62:
39:31:d7:76:51:37:99:29:ab:b7:56:e4:48:fd:a2:
df:2c:c7:c7:cf:7b:72:ac:ff:b5:81:c2:7c:3d:13:
1b:36:a7:95:df:02:1d:61:71:59:ea:b0:ae:6d:bb:
cd:b9:ac:c7:dd:fb:77:50:22:9d:b5:c5:c9:24:5f:
b3:72:6e:f8:fe:cb:73:fa:a9:7b:b5:97:7d:a8:6b:
a0:02:94:8e:c7:44:f5:5f:9d:9b:43:62:b6:5d:f1:
14:69:72:0f:33:18:61:00:8e:cb:93:79:a5:05:61:
b3:2a:c5:f4:26:96:b9:69:f2:83:d2:ab:b0:29:7d:
df:fd:c7:b0:61:57:ef:49:62:bc:e1:15:69:b8:e5:
da:25:23:24:8a:0e:c6:6d:40:c3:47:ec:36:61:5a:
12:05:fe:74:e0:71:28:e6:bf:3c:92:a1:ac:53:d8:
65:eb:f1:c2:65:aa:92:03:b4:a3:88:8b:ad:b0:44:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:5A:67:7E:B7:79:ED:CC:C4:10:14:03:03:65:FD:41:DA:B4:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d2f4a693-e28c-3388-9a64-a55c0025e700.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
52.223.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ed:3a:26:26:5d:93:9a:ad:45:3a:3b:96:b0:d8:45:45:7d:
fd:e4:fc:4f:32:97:83:ee:72:18:79:89:0a:d4:09:73:fb:24:
21:9f:9b:ef:df:19:7e:a2:c3:19:4c:0f:bf:c9:3a:4c:2e:0a:
e0:25:c0:33:59:a9:96:9c:eb:24:2f:2e:70:9a:32:5b:f7:a7:
f9:a1:71:db:3d:61:01:11:41:41:d8:a2:f7:41:be:cb:f8:aa:
8e:40:7f:3a:65:5b:4d:8d:df:86:c4:94:a0:ec:56:56:6c:d6:
a7:f5:b1:fb:1a:fc:39:06:14:9d:ae:2d:44:cb:e0:d7:4a:5d:
b5:5d:84:e8:99:b6:34:1a:12:b1:d3:33:58:ba:1b:6c:1e:1b:
2d:e0:d8:0d:78:6f:c3:71:e8:1f:0b:3b:61:92:f9:e0:b3:33:
b1:31:6e:f1:f2:2a:e1:ce:7a:05:07:1d:61:c8:29:5e:08:5f:
76:44:01:a6:81:46:b5:94:3f:77:07:d3:3c:98:41:e2:f5:72:
13:ae:28:79:78:3b:1a:fb:b5:96:61:72:18:ee:4c:0d:00:86:
5c:96:d2:9e:00:d3:58:ff:f1:9e:9e:02:e3:39:a1:ba:39:fa:
45:b7:95:9b:44:2a:fe:f9:24:28:a3:09:80:fb:94:f2:59:31:
99:59:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:00 2025 by rpki-client